In Global Properties, make sure "Accept Control Connections" and Accept Remote Access Control connections" are enabled OR make sure you have a rule allowing HTTPS and IKE NAT Traversal to the firewall.